Deserialization of Untrusted Data
A Broken Access Control vulnerability in Active Job
A Broken Access Control vulnerability in Active Job
A flaw in Active Job that can allow string arguments to be deserialized as if they were Global IDs. This may allow a remote attacker to inject arbitrary objects.